fal Set And Verify Serverless Secret

arazzo: 1.0.1
info:
  title: fal Set And Verify Serverless Secret
  summary: Create or replace a Serverless secret, then list secret names to confirm it is present.
  description: >-
    Secrets are injected as environment variables into fal Serverless runs.
    This workflow creates or replaces a named secret and then lists the
    organization's secret names to verify the new secret appears in the
    catalog. Secret values are never returned by the list endpoint, so
    verification is name-only. Every step spells out its request inline so the
    flow can be read and executed without opening the underlying OpenAPI
    description.
  version: 1.0.0
  x-realizes-capability-ids:
  - BC-4210.60
  x-capability-derivation:
    method: 'deterministic join: sourceDescriptions -> per-tag OpenAPI -> tag/capability edge. No classification at this step.'
    min_confidence: 0.7
    sources:
    - capability_id: BC-4210.60
      capability_name: Configuration & Secrets Management
      spec: fal-ai-secrets-api-openapi.yml
      confidence: 0.7
    model: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0
sourceDescriptions:
- name: secretsApi
  url: ../openapi/fal-ai-secrets-api-openapi.yml
  type: openapi
workflows:
- workflowId: set-and-verify-secret
  summary: Write a Serverless secret and confirm its name is registered.
  description: >-
    Sets a named secret for the calling organization, then lists secret names
    to confirm the write landed.
  inputs:
    type: object
    required:
    - secretName
    - secretValue
    properties:
      secretName:
        type: string
        description: Name of the secret to create or replace.
      secretValue:
        type: string
        description: Value injected as an env var into Serverless runs.
  steps:
  - stepId: setSecret
    description: >-
      Create or replace the named secret injected into Serverless runs.
    operationId: setSecret
    requestBody:
      contentType: application/json
      payload:
        name: $inputs.secretName
        value: $inputs.secretValue
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      savedName: $response.body#/name
  - stepId: listSecrets
    description: >-
      List the organization's secret names to confirm the newly written secret
      is registered. Values are never returned.
    operationId: listSecrets
    successCriteria:
    - condition: $statusCode == 200
    outputs:
      secretNames: $response.body#/0/name
  outputs:
    savedName: $steps.setSecret.outputs.savedName
    secretNames: $steps.listSecrets.outputs.secretNames